Hello.
Looking for some help and support with a custom alert.
The trigger logic should be: When X number of interfaces on a single node have a receive utilization of >80%, trigger alert for that node.
The idea being that if you have (for example) a 48 port switch and 40 of those ports are all at >80% receive utilization, there's probably some kind of loop or broadcast storm happening. An alert should be triggered for that node.
This will need some custom SQL/SWQL but I'm not sure how to achieve this. Could someone please assist?
Thanks in advance.